2 matches found
WordPress Plugin User Role Editor < 4.25 - Privilege Escalation
This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'WordPress User Role Editor Plugin Privilege Escalation', 'Description' = %q The WordPress User Role Editor plugin prior to v4.25, is lacking an...
CVE-2011-3126
The CVE-2011-3126 entry applies to WordPress core: versions 3.1 prior to 3.1.3 and 3.2 prior to Beta 2 allow remote attackers to determine usernames of non-authors via canonical redirects. The concrete impact is information disclosure (usernames) without authentication. Public details consistentl...